CVE-2026-48853

🗓️ 15 Jun 2026 21:56:15Reported by MendType

Unauthenticated RCE and DoS in elixir-grpc via deserialization of untrusted data.

Reporter	Title	Published	Views	Family All 17
BDU FSTEC	The vulnerability of the Erlpack codec library in the gRPC procedure call library for the Elixir programming language allows a perpetrator to execute arbitrary code or cause a service failure.	17 Jun 202600:00	–	bdu_fstec
Circl	CVE-2026-48853	16 Jun 202600:00	–	circl
CVE	CVE-2026-48853	15 Jun 202621:56	–	cve
Cvelist	CVE-2026-48853 Remote code execution and denial of service via unsafe Erlang term deserialization in elixir-grpc/grpc	15 Jun 202621:56	–	cvelist
EUVD	EUVD-2026-37015	25 Aug 202618:09	–	euvd
Github Security Blog	gRPC Erlang package vulnerable to Remote Code Execution with attacker-controlled gRPC payloads	25 Aug 202618:09	–	github
NVD	CVE-2026-48853	15 Jun 202623:16	–	nvd
osv-cve	CVE-2026-48853 Remote code execution and denial of service via unsafe Erlang term deserialization in elixir-grpc/grpc	15 Jun 202621:56	–	osv-cve
osv-eef	EEF-CVE-2026-48853 Remote code execution and denial of service via unsafe Erlang term deserialization in elixir-grpc/grpc	15 Jun 202621:56	–	osv-eef
osv-ghsa	GHSA-GRP7-V8XH-RJ7H gRPC Erlang package vulnerable to Remote Code Execution with attacker-controlled gRPC payloads	25 Aug 202618:09	–	osv-ghsa

Vulners

Node

grpc grpcRange0.1.0–1.0.0

Source	Link
github	www.github.com/elixir-grpc/grpc/pull/540
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/48xxx/CVE-2026-48853.json
github	www.github.com/elixir-grpc/grpc/security/advisories/GHSA-grp7-v8xh-rj7h
github	www.github.com/elixir-grpc/grpc/commit/25bcc569fe2cc4478531a6c546c923205fc751c9
hex	www.hex.pm/packages/grpc
github	www.github.com/elixir-grpc/grpc/commit/272a97a5ea1b46af1819f14a831fcf35fc91f992
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-48853
cna	www.cna.erlef.org/cves/CVE-2026-48853.html
osv	www.osv.dev/vulnerability/EEF-CVE-2026-48853
repo	www.repo.hex.pm/

07 Oct 2026 22:49Current

8.5High risk

Vulners AI Score8.5

CVSS 49.2

CVSS 3.19.8

EPSS0.00784

SSVC